SECURITY Affairs Malware Newsletter Round 119, published on 18 October 2026, is a collection of links to malware research and related reporting rather than a detailed account of a single incident. The subjects listed include IronChain ransomware, XWorm’s development from an infostealer into a surveillance platform, the Hirudo campaign involving fake updates and modified banking apps, and research tracking the GhostAction supply-chain campaign from 2025 to 2026.
Other selections cover spyware allegedly delivered through targeted adverts, a stealthy implant for FortiGate devices, an iOS exploit chain used in an Italian phishing campaign, and a Discord-based remote access trojan called CikaBika. The newsletter also links to work on a malicious npm package, malware backdoors and machine-learning approaches to detecting emerging malware.
It provides no technical details, affected versions, exploitation evidence or response guidance for these topics; readers are directed to the linked research for further information.